MCP.Market

Mail.app MCP server

by p-l-ta·io.github.p-l-ta/mail-mcp·v1.3.5·1 stars

Search, read, send, and manage email via macOS Mail.app across all configured accounts.

A85/100grade A
What users say
No reviews yet
Be the first
Safety scan
A85/100

full report

Adoption
New

1 stars41 downloads/wk

Reviews

Write one

Nobody has reviewed Mail.app yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

Mail.app tools (6, 4 write)

write = sends, deletes, buys or posts

Read from the package source without running it. The installed server may list more.

  • check_compatibility

    Probe each mail-mcp dependency (Envelope Index schema, SyncedRules.plist, AppleScript, MailData directory) and report pass/fail. Run this after a macOS update to verify nothing broke.

  • create_rulewrite action

    Create a new Mail.app rule. A timestamped backup of SyncedRules.plist is made before writing. Mail.app may need to be restarted for the rule to take effect.

  • delete_rulewrite action

    Permanently delete a Mail.app rule by its RuleId. A timestamped backup of SyncedRules.plist is made before writing so the deletion can be undone. Mail.app may need to be restarted for the change to take effect.

  • list_rules

    List all Mail.app rules with their conditions and actions. Reads directly from SyncedRules.plist.

  • submit_feedbackwrite action

    Open a pre-filled GitHub issue for mail-mcp (…) in the default browser. Automatically includes macOS version and mail-mcp version in the issue body.

  • update_rulewrite action

    Update an existing Mail.app rule by its RuleId (use list_rules to find IDs). A timestamped backup is made before writing. Mail.app may need to be restarted for changes to take effect.

Public scan report

scanner v0.1.9 · 2026-09-26 · same rubric, same numbers if you re-run it

no findings
  • Code scan66 source files scanned25/25
  • –Live reliabilityno gateway calls yet and no remote to proben/a
  • –Tool poisoningtools not inspected (local package is not executed); not countedn/a
  • Auth qualitylocal package, no credentials required12/15
  • Maintenancelast push 78 days ago12/15
  • Maintainer identityregistry namespace matches repository owner6/10
Overall 85/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

How Mail.app compares

Against every graded Email MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score
85/100
higher than 78% of 914 Email servers
Tools
6
the typical Email server has 7
Tools that change things
67%
typical: 25%. Fewer write tools means less an agent can break
GitHub stars
1
more than 65% of 492 Email servers
Downloads a week
41
more than 30% of 231 Email servers with a package

What its tools let an agent do: 2 read · 1 create · 2 change · 1 delete

Install Mail.app in Claude Code, Cursor or VS Code

Runs npx -y @p-l-ta/mail-mcp on your machine. Read the scan report first; the gateway never runs local packages.

claude mcp add mail-mcp -- npx -y @p-l-ta/mail-mcp
Add to Cursor

What the publisher says

From the Mail.app repository's README, as published. We do not edit it. Read it on GitHub

mail-mcp

MCP server that gives Claude (and other MCP hosts) full access to Mail.app on macOS — search, read, send, reply, flag, move, and more — across every account configured in Mail.app (iCloud, Exchange, IMAP, etc.).

Prerequisites

  • macOS (Mail.app required)
  • Node.js 20+
  • An MCP host: Claude Desktop, Amazon Quick, or any stdio MCP client

Installation

Claude Desktop — one-click install (recommended)

  1. Download mail-mcp.mcpb from the latest release
  2. Double-click the .mcpb file — Claude Desktop installs it automatically
  3. Grant the required macOS permissions (see below)

Manual / Amazon Quick / other hosts

npx @p-l-ta/mail-mcp

Or install globally:

npm install -g @p-l-ta/mail-mcp
mail-mcp

Point your MCP host at the mail-mcp binary (stdio transport). Example config:

{
  "mcpServers": {
    "mail-app": {
      "command": "npx",
      "args": ["@p-l-ta/mail-mcp"]
    }
  }
}

Required macOS permissions

Grant these to the application that runs the MCP host (Claude Desktop, Amazon Quick, etc.):

The MCP server process inherits permissions from the host application that launches it.

Tools

How it works

  • Search & read — queries Mail's own Envelope Index SQLite database directly for fast, structured results across all accounts
  • Actions (send, reply, flag, move, trash) — driven by AppleScript automation against Mail.app, so they work even for accounts where messages aren't stored as local files

Development

npm install
npm run dev          # tsx watch — live reload
npm test             # vitest unit tests
npm run build        # compile TypeScript → dist/
npm run mcpb         # build Claude Desktop extension → build/mail-mcp.mcpb

Interactive MCP testing:

npm run build
npx @modelcontextprotocol/inspector node dist/server.js

Privacy Policy

mail-mcp is a local MCP server that runs entirely on your Mac. It has no backend, no telemetry, and makes no network requests of its own.

What it accesses:

  • Mail.app's Envelope Index database (~/Library/Mail/) — read-only, used for search queries
  • Mail.app via AppleScript — to read message bodies, send mail, flag, move, and trash messages

What it does NOT do:

  • Collect, store, or transmit any data outside your Mac
  • Connect to any external server or API
  • Log message content anywhere

All email data stays on your device and is only passed to the MCP host (Claude Desktop or another client) as part of normal tool responses. You control exactly which tools Claude can invoke.

License

MIT

Nothing above is checked by us. What we check is on the safety report.

Mail.app: common questions

Is Mail.app MCP server safe?
Yes, by our scan: it is graded A (85/100). Read the Mail.app safety report
How do I install Mail.app?
It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
Does Mail.app need an API key?
Not as far as the registry entry and our scan can tell: no credentials are declared or required.
Is Mail.app maintained?
The last commit was 115 days ago (2026-07-10). The latest release is v1.3.5.
What can I use instead of Mail.app?
Servers from other publishers that do the same job: Agenticmail MCP server, Openagentemail MCP server and Agent Email MCP server.
How does Mail.app compare with other Email MCP servers?
safety score 85/100 (higher than 78% of 914 Email servers); tools 6 (the typical Email server has 7); tools that change things 67% (typical: 25%. Fewer write tools means less an agent can break). Full comparison.

Alternatives to Mail.app

Same job from other publishers: the closest match first, then the best rated.

  • Agenticmail
    Real email and SMS for AI agents — send mail, receive verification codes, drive a real inbox.
    B
  • Openagentemail
    Unlimited agent mailboxes — create identities, read/wait for mail, extract OTPs, send email.
    B
  • Agent Email
    Local email connectivity for AI agents — read, draft, send, and organize Outlook mail via MCP
    A
  • Proton Mail (unofficial)
    Unofficial Proton Mail MCP — send, read, search & organize email over SMTP and IMAP
    B
  • Mailbox
    Multi-account email MCP server for Gmail, IMAP, and JMAP: search, send, drafts, labels.
    B